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(54) wmnzm *mmi'A7-i*t. z®mm*XT&rmzn%mmn, %.mw&&&±*^)<r 



(57} CS^3 

[1MB] 3 f-«oKffi^fco^iEiiK±L^±-C\ ft 

[ 8?$#S 3 $iM§§S 1 Ii , iMfrf £ «x h U - A 
*<OE C MC^P-TTEfltoftSfcS L fcKfiMffffiS 

w*>ziitc$&A h o -awe cm* 

I C^-H4t4i.S. I C*-H4tt. ECMt¥ff 
LTEtt LT & & E M MffXmt frt, yiv-vti 

a, «»wja«>t:tfLT*a«^-r*it flavor 

fcLh.fcEMM£^LTWSiSB3K3E-f . SfltlHE 

EMMSr3WSIi7t*Mxh 'J-Afc#ALTE»fflcO 
Sffl^ F y-Afcflsj£LT£:h.HHfliEltofctf>fc:VT 
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-»Wtf>*»flHL raen?£IMffffi«**/ttf*IIL 

A,tMwmmzmix%imx b y -j>zmmz 
mmmmmzmt>ti. mtax h y -j>mm#m 

mt&ffl&Z b V -J*Wz*crm&x h y -AfcH LT 

mmmasmt, 

m&tmkmzmihti, ®mmm.frt>m&ztix 
n*ifz®tm&x h v-Mzmmzmimmz-> 
^xomswrnmnztix^zmmz, znmnm 

mm^^)T^ : J^~Mzmn^ix. mwt^mi 

1R*frEttl/C£<f!ft¥Ri:. 

muzw&mz b v-^mfcn&m&wm 
-rtmm^titz^z , * h y 
rnKx^mmmmt mmzmvztitzmd* 
y x-f **j*-ns\k*j-&&*mwm*&ii . 

s*Lfc*E*tiA h y -^m^mmw^yiv 
-nmm^ixtz^z. torn* b v-&tz* 
ttix^imimwmmmzmmzmmzixtzmi 

»e** * y r <* : J*.-Mzmit>ti. mxftcomft 
*, mmmmzxmmztix^zmmtixis 
t m^x . friegft^atitt l^w h y -a 

* l$S#Rfc «t 0 ^-7lB«OTflg-t'S> § k mztit: 
HE* ^'Jf^ xa-Mdi&ft *>ix . sffififflSiJffifB 

^xmittm^tmk. 
me&®&mzikvt>ti. mtm^immzx om^t 

a* l fciuiBSifflx h u —m, iz$m iximmmm* 
b y-j»z%.f§Lt&tmmx b o-^mmt zm 



imm) mdMmmmmmii. mmm 
miz®mm®wmmz$£itii>(Dk u 

*>oMB#fflffl«^*S*5MlBfflfli0JffliffiWa*S 

5r*i3&>rh mmti-mm i cfBSwwfMv 

[19*313 3 MBX h U-AiSfi^Rtt, BufB*»flt 

*. mamm, Kwizmmmmmz. m 

mix%imxbv-2»rmi-z>i>nki. 
ms&m&mzmtiti. mm^mm^mt^tix 
mutmim®zbv-j*m%mmm^mm 

im^tttzm^^ ^m&xbU-Mz^ihX^ 

&mm&#4 vimzmmzmftztitzmE.-*** 

m&w^mmhiz t iw&t tm-m. i ttE«o 

i mm 4 3 mtx 1 1 iBaogft^s jix*** 
y r < * s/a-/i* 1 1 ^wis^x-fix 

h v-Azmmtixb v-Ammt . 

h y -Atw ix rfr-rmnmst:*? 

ifzzkmmktzmnm. 

mm s 3 mm i (cia»^st^SHfcj;^-fc^a 

%mmx'h-ox. 

mm&&wfrt>mztix m imim&x b y - 

Tv^^C. C?>{!SiJffi?8£ i ^S{c««§ix/oMB 

t, 

we*mm>e>mtiitixm tmtmmx b y - 

c. -?-co#fflxhy-A^as^Tui»miB#fflM 
SrggE^^^^MIB-b^a 'Jt^ t^-/Kt 

fflESai^B*^iMft§nTI« LfctulBSfflX h y - 

t, t-cos^x h y-A(^^^-cv^friBie»J»ti 

MB-fe^ * 'J t ^^ A -;^fff£^k#a(cJ: Out 
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tixwrnitzmmmx b v-uzmixmmm 
&x h v-j**&&-tiimmx h y -j*&vmk * 
muzz t £®m?z%mmwt. 
imm i mm 1 mm^mmmxt/mm 

8«ifetf>liieftfliSSB0»4»4;l fcftfcfflJJWHBK***. 
t. -f-coSifix h y-Afc**ftT^4MIHE»MWt 

frteie«*s^j; mmztix^m 

fgsmwm t >t , miesfsnstf j# l tz% 
mx h y -Aw^rt^reaoTOfcHjetiei* «re 
mm®t . 

tmztdzzuf, mmmmzz. mimtitzm 

mmmmmm&^mz£V£&2titzmMm$:. g 
wi^ffl^ vcuHHt?-* «*fl#at Srjysu^c 

t^tt'tS-b=fay-f **5>a-*. 
[JM*>B»5:IMn 
[0001 ] 

immtzmm] *%wu. mmm, «Lh* 

mm. CATV ($r-77U- rUhVa^) 

t, -r m®mkisATj*x'mzixi> sc^gs, »i 

[0002] 

imtrnm mmm. m±mm, catv 

SS£fT3*£. io*>«wfk. %<rmwm%(n I d 

Lfc I C#- Ffc-t** y t < tv'i- 

\m^.nmmmuxmit^tixa n , jb&o i c 

*~ F#§»3*ufcWI8HT L**»«>IIH**ff a ; 

[00 0 3] #-<oj^(c*tl,T*Rtf> I c# 
~F£fMrrf>*§&t>#>S# ? .. dc9i8£fil C#-Kc7) 

#-Fl ttfcW UM* 1 owlWftS fit v £ t fc 



&%mmmzti*'timixmitz 

[0 004 3 ST> i«J:dft««JBaicJ: 9.11088*1 

mmx-h^xh. ^T^T-nt'ntmmmzm 

[0005] ST. fl^flWiflUtflSO/IECl 
3 8 1 8 - 1 SMOJBtfa b y v XX- b X b 'J -A fc 

hmmh. frfcEMMii, «8ttfc*tLTR£S*l 

( i ct-biz%mtizt>(7i) izx o 

tlX^i. 

[ooo6] EMMfi. mcommzti^tuzmth 

gWT'ii. I'J^L^EMMt^^iiStfffg^ I C*- 
E M M*«?'J* Lfc ^IttCJCtTs I C*-V*C0 

[0007] ^^cv>, mmw\mmwmuz\tE 
Kc^by vx-x- yx b y - Aft *<nz timmmzm 

Htltzcoxii. *(Dby>xtf- bXbV—MZizttl 

[0008] -edX'I CXr-HIC*JV^T. IS1SLT*»S 
tPS&fflV^TEMM^«L. £*l***ttCttLTR 

fenSEMMftgflLjth^^^-hXhy-A^t 

s £ t t% teiifflw h 5 y^*- h x b y -a 
mixmnzmti. 

[000 9] zoxdiz. ict-bizmztitz&fi 

mzm%nmm&mixm{titzEMM&mi 

tzbyyxX-bXbV-£>mHrf&<VX\ ISfMt 

mttzic i3- vvmmsixtzmmx' i^ehex-* % 

^. JloTfcki^jElcalf-tfTofctLTtltt^r 
34^IB4I»jI:S*i*. 

[ 0 0 1 0 ] b Zbtf, M^HzWk^mm^VT 

Rmma. hmmmmx-miLtzmmmm 
mffmrnxw^uz <o . wmmx-mm<mmmmt 
msKti. m<n£ommm%mmmfe%n.x 
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~ifzb LTt» ^mWC-m^kfs oZ.t # 
[ 0 0 1 1 ] *£l*!(cft&ttft«) I C*-Y<no 

[00 12] 

IftWtftmiX -5 fc-f SUB] JJLtOJ: -5 

MRS L , jDA#K*»fc^ffl \ « t tf> t to X \ \ 
[0013] *^HJ{iC<73«k afcWB*#*l/CS:3*i 

ij r * ^^A-^att-r & c 1 1** . 

[0014] 

*>c*»wi, vmz^tm&t ut. m 
sarai, #®<7)mm*t'js%< ti-mnxtint 
«, %®izmtmwm&^m®m. *wtz 

§>mix%z>%&xhv~j»i . MiimmjBx.y3 
-heir, mitm. mm®&. ^fn»% 

mx h o-Mzmtx^-mmmm^i-tm 

izx vmfiztizmmimmmmzx omie#ffi 

xw-^zmmmmmmttcmm^ m 

mutitizkxittiti. 

[ooi5] mmnxn, mi^mmwmmmv 

7h<7*7!imiz£ vmziz tizmmwm*m< . 

uz&mmzmzmmz^xmmttmwmzti 
x^&m&z. zomwmzmmzmzixtzm 

7HCi DH«$ni»«tfffgieWJffll¥St^A»^ 



[0016] mEMwarcji, mta^tsmsmm 

coy 7 h^xTMStJ: 9^&TM£ffEttM«lffi 

^sara^st Lxmmzmte&mmmmm&mK 
mati&&nfrc,mztixm immm* hv- 

C. *cO#ffi*hU-AK£fi$ftTV^mfE#i»B 

( 0ttfcfiE#a»ffi* **tr ) * isatiaiFSiifcir 

5fc<DMESftllK>^ 4,ftfcWE*lllfll*fc***i 

simmnl iiiBiBig^afcJ: n&mtix^mm 
m&±tfm%.cr>mzmmufrt>*i btLnmam 

mvy h vxrmizz mmtihmmn&nz 
m>K mmimmzx mmztitzmwmm^x 

frx-ii. mimmmmvyhVxTmizx ons 

zixtzmmmt. amAzm-tzmtttsmm 
«wfi.T«w>Bfft«H« (nv-rm) m^x 

[0017] f LTWiMSSiETIi, WifcflWHT*- 

*)mztim&T-?®xmmmz£ 
nrn*t^M£#fflx h v-j*izmixmmco$ 

[00 1 83 i0j:3=5r^SS:f8t^ii:Cj: , 3, iWS 

yiv-rim^mti^iitz^mz^x^, a- 

•fO#atlEtT^-7ia#l*^k'5:l.. 

t:wmn*»m£m^mzixxm*uzmm® 

[0019] 

[0020] *^it»?s(i, /^-naij^&f.^w 

TCit^t «. J: 3 fc: L t, cot'*> l» „ ^-7lEI*k 
W|S3-^-7i: LX?>V-7W&tf1i1XtzmL 

<nmmm\t. m<^wmwxm%tix$mm 
izmi*i\fz%mfc<n>mm&.x'-ft!kth z. t mm 
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[0021301 tt*mmi&tz%?>ii®mi'ZTj± 

[00223 zmiz^tx o &&mmwmim 
y^fAii mmmn.mmm.m2, suss 3 o- 

l~3-n) . 1CA-Y4 (4-l~4-n) &£Vh'r*T- 
TVa-y (VTR) 5 (5-1, 5-2) £#LT&6. 

[00233 ftggiK 1 Tli, *HL**ffT-* £Hr 
tf. Witf ISO/IEC13818-ia«WaWCO 

byyx#-bxb>J -J»W±fSLZtih . ZVhyyx 

#-hxb>j-Mi. miimmmM.mm^yyy. 
mmmm^yyy. cATvjy7y%t'£*)%m 
mm 2 it- ix&mmw 3 cuntr . 

[00243 »1SH3 Mi. **ttfciS<05«IS»*fc: 
«fS*iftICXr-H4jW»S*l*. IC*-M 
(4, aia§ix^l?l«;i*l«tJSGt?tlEffll*l-CO*ffl<0g^ 
**«»B3fcWl/Ctt"r*-*. WSK83UL IC* 

AiK- bX b U -A£r£j£LT$«!3*l£VTR5^,!: 

[002 53 VTR 5 «&WcCfcT»SiSB3 |c« 

VXtf- FX b 'J -^^h'r^T-rtiE^-rS . 
[00 263 5H18K3U:. a-W^-XfcfcfC, 

*>Bfc>W«i. 5EfS8B3-l fc £ft8E3-2 1 Hfiffr-T 

g*»j*lt^*. tea. %mim3&mz?)v-r<?) 
ttm«&%.zti& mxm <. ic*-F4-i. 4-2t 

x\ ztimict-b-i-i, 4-2i)m%ztitz%mm. 

3-1. 3-2*«R-^^-rtigSSixS. 
[00 273 $T&j*^Sl tt, »M^xy3- F® 

ssi i , m-itm (Muxmss) 12, mmm 
1 3, mmm^itmi 4, sassssi 5tii« 

[00 283 #«Srffifi£t&B*«, *R T-**ifO 

4***1. ttizmfev&mmitttxttzrit $ it 

I). dW^tSiifc«ttT-^{4. -e-ix-fftMUXH 
SSI 2C4iA»ii-?». -^MUXHIKl 2t{i, 35(M$g 

4. *LTi*ife«f t -** I Muxniii2ej:o#4 

£*1T. «itfISO/IEC13818-UBtt«W 
SCO F y y*X- bXbV -A#£jS$*iS . 
[00 293 £«>h95'*i|f-h*hy-.Mi, fl^JS 

msi 3T^-y bmx'mizmixx7yyyn> 

Zixtz®. m 0 ITiEtiftftnil 1 4 TK 9 IJjE«fci6« 

ff^foWHfcii*. as, x?yyy>imm»>m<n 

^rUA-^-y Mi. fIW308Sl 3fcA/k-S;h.4. 



[00303-5- LT £ » J; 3 (=£VfrMa*Qa#ft3 
*ufc F 7 bxbV -i*Ji . ^iSHISSl 5fc«kD 

mfenm&zmmt&tziibff)&mm%titc±.x\ m 

mm2<\t$i t>iixmmzti&. 

[00313 zxmmmm 1 6ti. c p 

ti«ssjM«$fj»i 6*qw-4M*i#BKi, #aa 
ix. wmwmmmmmix^h. 

[00323 d£0lBllftiJW1PSjMft#gtt, M8f-^ 
01oT'*>6S«tiW8 (J21T. ECMfcffrfi) (c. # 

sax f u -am* ix ^-nm^mm^tmmi 
aw******. ?>v-nm<nie£&, mmwm 
Mk nmmz&mztis%i$ti&. ^ecmh m 
lews mm^TX 9 y yy>vmc mm « <m 

m$mifci>V>X'b-oX, rtjrvhltZtlXh^sX 
#-bxb U -A+e**S*i4 . 
[00 33 3 02(illl+?>gfi§gg3. I Ctj-bA 

fc«ti^vTR5 amumm^t^o ^mx-hi. 
[00343 zc?>®iz*?£oiz%temmtt. 
mmm2 1 . moitieii!SS2 2, mmmrnm 

3, ^KmK (DEMUX0SS) 24. W8t)»f3- 
HE1SS2 5 . i*MPlttiJl!|ll2 6 . ii^HISS2 7 . ^ 
-H$lJ«lg|528, 3*^^2 9. »)Wr-^}fAa?3 
0. 1 394^fy^7i-A31 > a-f'fy^7i- 

^ (a-r i/f) 3 2t>±vmmmmm3i% 

LX^b. tlx?-*— Mgp0SS2 1. ISOfTiEIIISS 
2 2, S-9»H1SS2 3, ^BtHOK (DEMUX0K) 
24. *tfeSJ*r3-Kll]K2 5. «»#^tii7j|l]K2 
6, a^@«82 7. ^-K»JWg|52 8. 3^^^29, 

I/F) 3 2fcJ;tX^«g»iIW3 3(i. '<X3 4t 
ftLXKWzmZtlX^Z. 

[00353 m*L%^TyTl-%£lz£ OScS^SrS 
ftT^S^JSCjill^ft^WTlA^ATjSn, f- 
a-^«IS15]»2 l^t^^^S. d«^m«-f 
(4, -fa— f-tSMUliS 2 1 XK-x^y bcoby yxx 
-bxbV-MzWMZixl. zmmStiKbyyx 

x-bxb <j-ui. m<oniEm2 2x<m%.mm 

JEmhtitznh, 1smmm23lzAJlZixZ>. 
[00363 flW*SS0R23fcli. byyXX-bX 
b >J-MZ%ttl(>ECmzviZhfZTX7 yy7m 

Mmzmmm 3 tj: m^tih . f 

FXhU - AJi. yyfMfimnhflX^h^ >v 

b cotx ? y yyntfmnmm® 2 3 t,zx nbtiz . 
t<4. 3sa$ix-f -eo* * fi^^iHiss 2 3 *x>i> 
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[00373 m^9mm2 3frt>imi}istit:b5>x 

jJf-hXh DEMUX0S|2 4-C#3V^- 

c o o 3 8 ] mr-m. n.m^^-Ym,2 5 

ftixm-T2fr$>iMiZixz>. m-T2\,z\±mt\$T 
n*y 3 ^ijia mm?) Kzmmti. 

bilk. 

[00 3 9) %&m&®8t 2 7 {±, ^-i-«i5;OS 
D (On Screen Display) tj: Off Sfl&E 

MMV3 3*&4£fc*U**«#*^*J*ai:&IIItt 
2 6A>4>aiA$ftS*fifg-*£«£**. 
[0040] IC#-Mtt. IC#-F4fciftWS>ft 
tzn*994 \Wn*992 9tC#ASixSifC«fi 
£E3^i:§£«f$fl!>. 3*?*2 9£{±;7-r-'i&J»SII 
2 8#, i^a^^^4 1Wi*j*B»4 2*<^-fil 

8 fcfiffil»4 2t<7)®X-ff)T—?m%lz± *) , gfl 
M3fcJ:*IC*-F4tf>7?**#JIS$fi*. 
[ 0 0 4 1 3 F0MR2 8»i, SflSSIM* 

m3mmnTizm®ft4 2tnT-?<?>m$:fT 
a. 

[0 04 2]™*, VTR5ii, ClOVTR 5fcfft»t6 
*ufe*fTl ljW»T3t:4r-^Ct^LT«l8 

m-Tl l(ctt, gffg§S3*>J;tfVTR5<9-Hl<f*l 
£Rft6*lfcl 3 9 44 V*7x-X3 1, 5 
«UHIS*ITV^4. «->T«W»rtt, 13 944 
^7i-X3 1 , 5 1 BlfcOIEEE 
jtfTC>*-*K»JcJ: 0 . £fI§SE3 1 VTR 5 1 WIS! 

[0043] 1 3944 >?7x-*3 ljK>*5*fflS 

mmm2 3WT-?m.mzmmiztmztix^ 

h. «!-5T13 944y^7x-^31T'VTR5*»A» 
KO&iftfcf-^i, «**MllI»2 3^i:-*iMi 
■£>. 13944>*:7x-X31 ^gflgE 3 AH* 

h<nxm^m\&, mtm®m2frhm i %mm 
2 3^(r)T-mimizm&T-?ftxm o 
«ik»*itv**. *->TiioinEia*2 2*»feB»*«*i 

*> F 5 yx^- FXHJ «W?-*Jf A$ 3 0 
fcfiLTl 394^y^7x-X3 l'VfrifcfU VT 
RS^tajflSft*. 

[0044] »]»f-^»AS?3 Ott. SflSSBMftW 



3 3t < t'34i^tL|,EMMSr, 1 394^>^7x- 
*31^fcfs&$ft£F7^*#-FXMJ-A+fc:Jf 
At*. 

[00453 i— T I/F32 fctt, »fly(*/l^>y ^ 
-h3>hP-5 (ttCH^-fr-T) ^^.Oft^SrSST 
T4*frLTAAU a-rtil-^WrtS^lgil-t 
i>. *LTi-0 , I/F3 2tt. BmLte-fmft 

%z%mmmw%3 3<Ktmmi. 

[00463 S«^ESfJ»33{i» WitfCPU. R 
OMt3£VRAM%ZttLX%&i><?)X't> r ). £fl& 

%®&mmm 3mtimmmi, mwstmwtz 
#xr>mm%h:mw)-m%Mmmzmx , 

rnxmn^mmtx^h. 

[00473 zzxmmmmma. demuxb 

fcIC*-H4^i:4i4. 

[0048] #fiffl««H^gBi. DEMUX»24 
T'#8$*i*:ECM£. 4:* a Ufw I C 

[00493 -eLTS"J»r-^jfASiJffli^S{±. r-7X 
;oi^FXFy-AfcVTR5fcTEIM-**a(C, I 
C * - M frfc** fcfl* E M M $rie»ti Yv>X# 
-YXVV -&<\b X o Izmmr-tftAM 3 

OHHWi. 

[00503 IC#-F4?)M»|I!K4 2Cti, 
**y4 3!WJN«3*l-CV>6. i^^'J4 3(=(i, IS 
ttfcfc* I D. T*?5y7Vl4H*W«:ir. «Jti? 
« (J21T. EMMfcftfS) fc£**lSBr5£tf>til?8#£ 

(jar. yiv-ymtwth) wsmztih. 

[00 5 1 3 $T»JWl5]K4 2li. M^tfCPU. RO 
3 T«>«fUIQttfltlCfll«4E^a U T < 

n-&m i wzhm xmmm&mmz®. tw*t 
[00523 zzx-mmmmmmmi. %mmw 

3 T«Pt t*m$ixT -^^ t>tit: E M M*J g e?5co t O 
^^'J4 3tfili§flfetil«&^»EM 
MC***i4JJfje«)flHlt:!aw-4 . 

[00533 ie»?rsw^a(i, BCM(c#iii«e 
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[0054] mmmamui, wtwsw&mz 

[00 5 53 * LtHtfffflt <IJ?'Jtff«£j£^&fc 

timwsn^mzx ^wzztixfrnni-Tim 

[0056] VTR5ti. 1 394^y^7i-X5 1 
Wfl&fc, £»W£fflffl!g? 5 2 fcj:^^®^ 5 3£i£L 

[0057] ia»S£««*5 5 2 tt. flitf r-T« 

tHJHff 5 21i, t'f^f-rTCJt U\ 1 3 9 4 4 y 
^7i-^5 HiYlX^l^tllhyyx^-hXh 

•j-ame**-*. 

[00 58] MffQlfl5 3(i. 1 394>f>-;?7x-* 

5 i&£mmmwm®5 2m®LxvTRt lt 

[ 0 0 5 9] ftKObWi 3 (c««;Sftfc*fttJflas^ 

c o o 6 o ] *-f , mmwmtiktims, mm 

MB1-CUMUXBK1 2X'±J$.ZtltzbyyxX-h 

xhv-Mzmx, mmmms&i 3X'x?yyyiv 

[006 1 3 Z0>A99>r?Mt/*jr -y h^ffiTffisil 
OSSlltksJi, &«««^MBTl£K$*t4. 

[0062] mmmmmu 1 6 m*<vm i a k 

sfcECMrtK**". *LTftj3^i»HW»16tt, E 
CMfcHLT»±»2«kwfcfflVvCI»<M-4. 
2&kwtf. m«ksJ;9fc*^flJirc5aE;&*l4. 

[oo63] s ^zmmmmmmu 1 6 «. f^m^^sg 

2Stkw£EMMf*Jfc^-f. *LT^ga$lJffllgP16 
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CONDITIONAL ACCESS SYSTEM, AND BROADCAST DEVICE, RECEPTION DEVICE 
AND SECURITY MODULE USED WITH SAME 



(57) Abstract 

Problem To improve the degree of freedom with 
respect to reproduction of programs recorded on a 
recording medium within a prescribed region such as a 
home, and to ensure convenience for the subscriber, while 
preventing abuse such as the distribution of copies. 
Means to solve A broadcast device 1 causes 
recording control information - indicating whether group 
recording is permitted - to be included in the ECM in a 
program stream to be transmitted. When group recording 
has been requested by the user, a reception device 3 
supplies the ECM for the selected program stream to an 
IC card 4. Based on the ECM and previously obtained 
and stored EMM information, IC card 4 judges whether 
group recording is permitted and - only when group 
recording is possible - generates and returns to reception 
device 3 the EMM that is encoded using a group key that 
is shared with respect to multiple contracts. When the 
EMM is returned from IC card 4, reception device 3 
inserts that EMM into the selected program stream to 
create a program stream for recoding use, which then is 
supplied to a VTR 5 for recording of the program. 




[Figure is translated at the end of the document.] 



[There are no amendments to this patent.] 
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Claims 

1, A conditional access system characterized in that it is comprised of a broadcast device, 
a reception device, and a security module, and is equipped with 

a stream transmission means that is provided in the aforementioned broadcast device and 
that transmits a program stream formed by multiplexing at least a series of subject matter 
information that indicates the subject matter for a program, and program information that 
includes control information pertaining to the program, and individual information that includes 
individual control information for each conditional access reception contract; 

a recording control information transmission means that is provided in the 
aforementioned broadcast device and that causes recording control information that indicates 
whether group recording is permitted for the program stream to be included in the program 
stream transmitted by the aforementioned stream transmission means; 

an individual information processing means that is provided in the aforementioned 
reception device and that, when individual information for the contract pertaining to this same 
device is multiplexed in the aforementioned transmitted program stream arriving from the 
aforementioned broadcast device, supplies this individual information to the aforementioned 
security module installed in this same [receptionj device; 

a storage means that is provided in the aforementioned security module and that stores 
prescribed control information that is included in the individual information supplied from the 
aforementioned reception device in which it is installed; 

a program information processing means that is provided in the aforementioned reception 
device and that, when group recording of the aforementioned transmitted program stream 
arriving from the aforementioned broadcast device to a prescribed recording medium has been 
specified, supplies the aforementioned program information that is multiplexed in that program 
stream to the aforementioned security module installed in this same [reception] device; 

a recording control information processing means that is provided in the aforementioned 
reception device and that, when group recording of the aforementioned transmitted program 
stream arriving from the aforementioned broadcast device to a prescribed recording medium has 
been specified, supplies the aforementioned recording control information included in that 
program stream to the aforementioned security module installed in this same [reception] device; 

a recording permissibility judgment means that is provided in the aforementioned 
security module and that, based on the control information included in the aforementioned 
program information supplied from the aforementioned reception device in which [this security 
module is] installed, and the control information stored in the aforementioned storage means, and 
the aforementioned recording control information supplied from the aforementioned reception 
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device in which [this security module is] installed, judges whether group recording of the 
program stream that has arrived at the aforementioned reception device is permitted; 

an individual information generation means that is provided in the aforementioned 
security module and that, when the aforementioned recording permissibility judgment means has 
judged that group recording is possible, generates individual information using the control 
information stored by the aforementioned storage means; 

an encoding means that is provided in the aforementioned security module and that uses a 
prescribed encoding key that is shared by multiple contracts including the contracts pertaining to 
this same device to decode the individual information generated by the aforementioned 
individual information generation means; 

and a recording stream generation means that is provided in the aforementioned reception 
device and that generates a program stream used for recording by multiplexing the 
aforementioned individual information, after it has been encoded by the aforementioned 
encoding means, with the aforementioned transmitted program stream arriving from the 
aforementioned broadcast device. 

2. The conditional access system recorded in Claim 1, characterized in that the 
aforementioned recording control information transmission means causes the aforementioned 
recording control information to be included in the aforementioned program information, 

and the aforementioned program information processing means also serves as the 
aforementioned recording control information processing means. 

3. The conditional access system recorded in Claim 1, characterized in that the 
aforementioned stream transmission means transmits a program stream formed by multiplexing 
prescribed program guide information for the purpose of introducing future broadcast content in 
addition to the aforementioned subject matter information, the aforementioned program 
information, and the aforementioned individual information, 

and [the conditional access system is] equipped with a program guide information 
processing means that is provided in the aforementioned reception device and that, when group 
recording of the aforementioned transmitted program stream arriving from the aforementioned 
broadcast device to a prescribed recording medium has been specified, supplies the 
aforementioned program guide information included in that program stream to the 
aforementioned security module installed in this same [reception] device, 

and the aforementioned recording control information transmission means causes the 
aforementioned recording control information to be included in the aforementioned program 
guide information, 

and the aforementioned program guide information processing means also serves as the 
aforementioned recording control information processing means. 
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4. A broadcast device that forms a conditional access system together with the reception 
device and the security module recorded in Claim 1, 

the broadcast device being characterized in that it is equipped with a stream transmission 
means that transmits a program stream formed by multiplexing at least a series of subject matter 
information that indicates the subject matter for a program, and program information that 
includes control information pertaining to the program, and individual information that includes 
individual control information for each conditional access reception contract; 

and a recording control information transmission means that causes recording control 
information that indicates whether group recording is permitted for the program stream to be 
included in the program stream transmitted by the aforementioned stream transmission means. 

5. A reception device that forms a conditional access system together with the broadcast 
device and the security module recorded in Claim 1 , 

the reception device being characterized in that it is equipped with an individual 
information processing means that, when individual information for the contract pertaining to 
this same device is multiplexed in the aforementioned transmitted program stream arriving from 
the aforementioned broadcast device, supplies this individual information to the aforementioned 
security module installed in this same [reception] device; 

a program information processing means that, when group recording of the 
aforementioned transmitted program stream arriving from the aforementioned broadcast device 
to a prescribed recording medium has been specified, supplies the aforementioned program 
information that is multiplexed in that program stream to the aforementioned security module 
installed in this same [reception] device; 

a recording control information processing means that, when group recording of the 
aforementioned transmitted program stream arriving from the aforementioned broadcast device 
to a prescribed recording medium has been specified, supplies the aforementioned recording 
control information included in that program stream to the aforementioned security module 
installed in this same [reception] device; 

and a recording stream generation means that generates a program stream used for 
recording by multiplexing the aforementioned individual information, after it has been encoded 
by the aforementioned encoding means, with the aforementioned transmitted program stream 
arriving from the aforementioned broadcast device. 

6. A security module that forms a conditional access system together with the broadcast 
device and the reception device recorded in Claim 1, 

the security module being characterized in that it is equipped with a storage means that 
stores prescribed control information that is included in the individual information supplied from 
the aforementioned reception device in which it is installed; 
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a recording control information processing means that, when group recording of the 
aforementioned transmitted program stream arriving from the aforementioned broadcast device 
to a prescribed recording medium has been specified, supplies the aforementioned recording 
control information included in that program stream to the aforementioned security module 
installed in this same device [sic]; 

a recording permissibility judgment means that, based on the control information 
included in the aforementioned program information supplied from the aforementioned reception 
device in which [this security module is] installed, and the control information stored in the 
aforementioned storage means, and the aforementioned recording control information supplied 
from the aforementioned reception device in which [this security module is] installed, judges 
whether group recording of the program stream that has arrived at the aforementioned reception 
device is permitted; 

an individual information generation means that, when the aforementioned recording 
permissibility judgment means has judged that group recording is possible, generates individual 
information using the control information stored by the aforementioned storage means; 

and an encoding means that uses a prescribed encoding key that is shared by multiple 
contracts including the contracts pertaining to this same device to decode the individual 
information generated by the aforementioned individual information generation means. 

Detailed explanation of the invention 
[0001] 

Technical field of the invention 

The present invention pertains to a conditional access system for the purpose of 
performing conditional access broadcasting in a broadcast system for satellite broadcasting, 
terrestrial broadcasting, CATV (Cable Television), or the like, and pertains to a broadcast device, 
a reception device, and a security module used in this conditional access system. 

[0002] 
Prior art 

When conditional access broadcasting is performed in a broadcast system for satellite 
broadcasting, terrestrial broadcasting, CATV (Cable Television), or the like, typically for each 
individual contract an IC card on which is registered an ID and an encoding key unique to that 
contract is issued as a security module. In addition, conditional access broadcasting is performed 
in the reception device, within the scope of the contract, only when this IC card is installed. In 
other words, the broadcast signal is encoded using a specific encoding key, and the encoding can 
be released only with a reception device in which a legitimate IC card is installed. 
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[0003] 

In some cases multiple IC cards are issued to a single contractee, but in this case the price 
is levied for the number of IC cards issued; in other words, there always is one contract with 
respect to one IC card. In other words, a contractee possessing multiple conditional access 
reception devices must have a separate contracted IC card for each reception device. 

[0004] 

In addition, with a program that is broadcast by means of conditional access broadcasting 
there are cases in which it is possible to record the program to a videotape or the like recording 
medium, and to reproduce the program later. In this case, to prevent unauthorized copying and 
the like, typically a system is used whereby the broadcast signal is recorded in the encoded state. 

[0005] 

The broadcast signal is, for example, a transport stream in the ISO/DEC 13818-1 standard 
format. The encoding key for the subject matter data (video data, audio data, and the like) for a 
program included in this transport stream is changed periodically to prevent unauthorized 
reception. In addition, to know the encoding key for the subject matter data it is necessary to 
reference the individual information (hereinafter, 'EMM') for each contract. The EMM is 
multiplexed in the transport stream in the encoded state by means of a unique encoding key 
(which is registered on an IC card) that is set with respect to each contract. 

[0006] 

The EMM for each of many contracts is transmitted sequentially; therefore, the EMM for 
[any] one contract is transmitted at a relatively long interval. Therefore, at the reception device 
the information included in the EMM that has arrived is stored on an IC card and then is used. 
When new EMM arrives, the information on the IC card is updated. 

[0007] 

Therefore, in some cases the EMM does not arrive during the period in which recording 
to a recording medium is occurring, and thus a transport stream that does not contain the EMM is 
recorded to the recording medium, so the encoding of the subject matter data included in that 
transport stream cannot be released. 
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[0008] 

Therefore, the EMM is generated using information stored in the IC card and this [EMM] 
is supplied to the reception device side while encoded using a unique encoding key set for each 
contract. By inserting the EMM supplied from this IC card into the received transport stream in 
the reception device, a transport stream for recording use is generated and provided for recording. 

[0009] 

Thus, a transport stream - in which is multiplexed EMM that has been encoded using an 
encoding key that is unique for each contract registered on the IC card - is recorded, so when 
recording occurs, [the program] can be reproduced only at the device in which the IC card used 
at the time of recording is installed. Thus, for example, even if unauthorized copying has 
occurred, there is only one device capable of reproducing [the program], thus preventing abuse 
such as the distribution of copies. 

[0010] 

However, when there are multiple reception devices or VTRs in a home and multiple 
devices are used, such as when a program recorded in one room is reproduced in another room or 
when unattended recording occurs, then as described above when the device with which 
reproduction is possible is restricted, the IC card must be exchanged, which is extremely 
inconvenient. Furthermore, when the device in which the IC card used at the time of recording is 
installed is in use, even if another device is not in use, that device is unable to reproduce [a 
program], which is extremely inconvenient. 

[0011] 

Furthermore, there is a problem in that when a program that was recorded using an IC 
card that is [one] of the multiple IC cards in the home and that has a relatively high contract level 
is being reproduced, an IC card with a relatively low contract level must be used to receive a new 
program, which restricts the reception of new programs. 

[0012] 

Problems to be solved by the invention 

As described above, conventionally a program recorded on a recording medium can be 
reproduced only on the device in which the security module used at the time of recording is 
installed, so the use of the device in the home or the like is severely restricted, which greatly 
inconveniences the subscriber. 
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[0013] 

The present invention was devised in consideration of such circumstances, the objective 
being to provide a conditional access system that is capable of improving the degree of freedom 
of the reproduction of programs recorded on a recording medium within a prescribed region, 
such as a home, and to ensure convenience for the subscriber, while preventing abuse such as the 
distribution of copies; in addition, the objective is to provide a broadcast device, a reception 
device, and a security module used with this conditional access system. 

[0014] 

Means to solve the problems 

To achieve the aforementioned objectives, the present invention has the configuration 
shown in the following. In other words, when the broadcast device transmits - by means of a 
stream transmission means comprised of a video/audio encoding circuit, a multiplexing circuit, a 
signal-processing circuit, an error correction/encoding circuit, and a modulation circuit, for 
example - a program stream formed by multiplexing at least a series of subject matter 
information that indicates the subject matter for a program, and program information that 
includes control information pertaining to the program, and individual information that includes 
individual control information for each conditional access reception contract, [at this time] 
recording control information indicating whether group recording with respect to the program 
stream transmitted by the stream transmission means is permitted is included in the 
aforementioned program stream - for example, in the aforementioned program information or 
program guide information - by means of a recording control information transmission means 
that is implemented by software processing in the broadcast device control unit, for example. 

[0015] 

At the reception device, when individual information for the contract pertaining to this 
same device is multiplexed in the aforementioned transmitted program stream arriving from the 
aforementioned broadcast device, for example, an individual information processing means that 
is implemented by software processing in the reception device control unit supplies this 
individual information to an IC card or the like security module installed in this same device. 
Then, at the aforementioned security module, prescribed control information included in the 
individual information supplied from the aforementioned reception device in which [this security 
module is] installed is stored in a storage means comprised of an individual information storage 
control means implemented by means of software processing in a memory control circuit, for 
example. 
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[0016] 

At the aforementioned reception device, when group recording of the aforementioned 
transmitted program stream arriving from the aforementioned broadcast device to a prescribed 
recording medium has been specified, a program information processing means that is 
implemented by means of software processing in the reception device control unit, for example, 
and that also serves as a recording control information processing means, for example, supplies 
the aforementioned program information (which includes recording control information, for 
example) that is multiplexed in that program stream to the aforementioned security module 
installed in this same [reception] device. Then, at the aforementioned security module, a 
recording permissibility judgment means implemented by means of software processing in a 
control circuit judges whether group recording is permitted for the program stream that has 
arrived at the aforementioned reception device, [said judgment being] based on the control 
information included in the aforementioned program information supplied from the 
aforementioned reception device in which [this security module is] installed, and the control 
information stored in the aforementioned storage means, and the aforementioned recording 
control information supplied from the aforementioned reception device in which [this security 
module is] installed. If it is judged that group recording is possible, an individual information 
generation means implemented by means of software processing in a control circuit, for example, 
uses the control information stored in the aforementioned storage means to generate individual 
information. Furthermore, at the aforementioned security module, an encoding means 
implemented by means of software processing in a control circuit uses a prescribed encoding key 
(group key) that is shared by multiple contracts including the contracts pertaining to this same 
device to decode the individual information generated by the aforementioned individual 
information generation means. 

[0017] 

Then, at the aforementioned reception device, a recording stream generation means - 
which is formed by means of a control data insertion unit and a control data insertion control 
means that is implemented by means of software processing in the reception device control unit 
- generates a program stream for recording use by multiplexing the aforementioned individual 
information, after it has been encoded by the aforementioned encoding means, with the 
aforementioned transmitted program stream arriving from the aforementioned broadcast device. 

[0018] 

By implementing such means, group recording is enabled according to the user's desire 
only for programs for which it is indicated - by means of the recording control information 
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indicated in the program stream at the broadcast device - that group recording is permitted. This 
group recording is performed by recording a recording-use program stream formed by 
multiplexing the individual information - which is generated by the security module and has 
been encoded using a prescribed encoding key that is shared by multiple contracts - with the 
aforementioned program stream transmitted from the broadcast device. 

[0019] 

Embodiment of the invention 

In the following an embodiment of the present invention will explained with reference to 

figures. 
[0020] 

The embodiment of the present invention permits group recording under certain 
conditions. Group recording means the permitting of the reproduction of a program, which has 
been received and recorded on a recording medium by another reception device, on another [sic] 
reception device, [this being permitted] among multiple reception devices that have been set in 
advance as [belonging to] the same group. 

[0021] 

Figure 1 is a block diagram showing the configuration of the relevant parts of a 
conditional access system and the relevant parts of a broadcast device according to the present 
embodiment. 

[0022] 

As shown in this figure, the conditional access system of the present embodiment has a 
broadcast device 1, a broadcast facility 2, reception devices 3 (3-1 to 3-n), IC cards 4 (4-1 to 4-n), 
and videotape recorders (VTRs) 5 (5-1, 5-2). 

[0023] 

At broadcast device 1 a transport stream that includes subject matter data for programs 
and has the ISO/EEC 13818-1 standard format, for example, is generated. This transport stream is 
transmitted to each reception device 3 via broadcasting facility 2, which is comprised of a 
publicly known satellite broadcast infrastructure, terrestrial broadcast infrastructure, CATV 
infrastructure, or the like. 
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[0024] 

An IC card 4, [one of] which is issued for each conditional access reception contract, is 
installed in [each] reception device 3, IC card 4 permits a reception device 3 to receive programs 
within a range that is in accordance with registered contractual content. Reception device 3 
reproduces only the programs permitted by IC card 4 on a television receiver, not shown in the 
figure, or generates a recording-use transport stream that is output to a connected VTR 5. 

[0025] 

VTR 5 is connected to reception device 3 as needed, recording the transport stream 
supplied from reception device 3 to videotape. 

[0026] 

Multiple reception devices 3 can be grouped together according to the user's needs and 
based on the contract with the broadcasting company. With the example in this figure, reception 
device 3-1 and reception device 3-2 form a group G. The group information is not set in the 
reception device 3 itself; instead, the reception devices 3-1 and 3-2 in which IC cards 4-1 and 4-2 
are installed are set in the same group by setting a shared descramble key for group use in these 
IC cards 4-1 and 4-2. 

[0027] 

Broadcast device 1 has a video/audio encoding circuit 11, a multiplexing circuit (MUX 
circuit) 12, a signal-processing circuit 13, an error correction/encoding circuit 14, a modulation 
circuit 15, and a broadcast device control unit 16. 

[0028] 

The multiple [types of] subject matter data such as video, audio, and [other] data that 
form a program are supplied to video/audio encoding circuit 1 1 and are encoded with the 
respective prescribed compression encoding method. These encoded subject matter data are 
separately supplied to MUX circuit 12. MUX circuit 12 also is supplied with various types of 
control data generated by broadcast device control unit 16. These data are multiplexed by MUX 
circuit 12 and a transport stream is generated in the ISO/DEC 13818-1 standard format, for 
example. 

[0029] 

After this transport stream is scrambled as needed in units of packets by signal- 
processing circuit 13, it undergoes encoding in error correction/encoding circuit 14 for the 
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purpose of error correction. Packets that are not required to be scrambled are [passed] through 
signal-processing circuit 13 [as is]. 

[0030] 

Then, this transport stream that has undergone various required processes is modulated 
by modulation circuit 15 for the purpose of transmission on a prescribed transmission path, and 
then is supplied to broadcast facility 2 and is broadcast. 

[0031] 

Broadcast device control unit 16 has a CPU, ROM, RAM, and the like, for example, and 
implements processes for the overall control of each unit in order to operate as a broadcast 
device by means of software processes. In addition, a control means possessed by this broadcast 
device control unit 16 is equipped with a recording control information transmission means in 
addition to a typical, publicly known control means such as a processing means for the 
broadcasting of programs. 

[0032] 

This recording control information transmission means causes the recording control 
information - which indicates whether group recording of a program stream is permitted - to be 
included in the program information (hereinafter, 'ECM"), which is one type of control data. The 
permissibility of group recording is specified freely for each program by the broadcasting 
company. The ECM describes various information, such as viewing information for each 
program and a descramble key, and is packetized and multiplexed in the transport stream. 

[0033] 

Figure 2 is a block diagram showing the configuration of the relevant parts of reception 
device 3, IC card 4, and VTR 5 in Figure 1. 

[0034] 

As shown in this figure, reception device 3 has a tuner/demodulation circuit 21, an error 
correction circuit 22, a signal-processing circuit 23, a separation circuit (DEMUX circuit) 24, a 
video/audio decoding circuit 25, a video/audio output circuit 26, a mixing circuit 27, a card 
control unit 28, a connector 29, a control data insertion unit 30, a 1394 interface 31, a user 
interface (user I/F) 32, and a reception device control unit 33. In addition, tuner/demodulation 
circuit 21, error correction circuit 22, signal-processing circuit 23, separation circuit (DEMUX 
circuit) 24, video/audio output circuit 25, video/audio output circuit 26, mixing circuit 27, card 
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control unit 28, connector 29, control data insertion unit 30, user interface (user I/F) 32, and 
reception device control unit 33 are interconnected via a bus 34. 

[0035] 

A broadcast wave is received by an antenna, not shown in the figure, and the broadcast 
signal is input from a terminal Tl and supplied to tuner/demodulation circuit 21 . This broadcast 
wave is demodulated to a baseband transport stream by tuner/demodulation circuit 21. This 
demodulated transport stream undergoes a prescribed error correction process at error correction 
circuit 22 and then is input to signal-processing circuit 23. 

[0036] 

In signal-processing circuit 23 the descramble key indicated in the ECM included in the 
transport stream is set by means of reception device control unit 33. The descrambling of the 
scrambled packets [in] the transport stream is performed in signal-processing circuit 23. Packets 
to which scrambling has not been applied are [passed] through signal-processing circuit 23 with 
no processing. 

[0037] 

The transport stream output from signal-processing circuit 23 is separated into each of its 
components in DEMUX circuit 24, and of these, the subject matter data are supplied to 
video/audio decoding circuit 25 while the control data are supplied to reception device control 
unit 33. 

[0038] 

The subject matter data are decoded by video/audio decoding circuit 25 and then are 
supplied to video/audio output circuit 26, where they are appropriately combined and the 
program data are reproduced. These reproduced program data also are converted to an analog 
program signal in video/audio output circuit 26 and then this is output from a terminal T2 via 
mixing circuit 27. A television receiver (not shown in the figure), for example, is connected to 
terminal T2, and the program is reproduced by this television receiver based on this program 
signal. 

[0039] 

Mixing circuit 27 mixes the video signal supplied from reception device control unit 33 
with the program signal output from video/audio output circuit 26 so that a menu can be 
displayed by an OSD (On Screen Display). 



[0040] 

IC card 4 is installed in reception device 3 by inserting a connector 41 provided on IC 
card 4 into connector 29. Card control unit 28 is connected to connector 29, and a control circuit 
42 is connected to connector 41. Accordingly, when [the IC card] is installed, data are exchanged 
between card control unit 28 and control circuit 42, thus enabling reception device 3 to access IC 
card 4. 

[0041] 

Thus, card control unit 28 exchanges data with control circuit 42 under the control of 
reception device control unit 33. 

[0042] 

VTR 5 is connected to reception device 3 by connecting a terminal Tl 1 provided on VTR 
5 to a terminal T3 through a cable C. 1394 interfaces 31 and 51, which are provided respectively 
on reception device 3 and VTR 5, are connected respectively to terminal T3 and terminal Tl 1 . 
Accordingly, when [these components] are connected, data are transmitted between 1394 
interfaces 31 and 51 in a procedure in accordance with IEEE 1394, and thus data are exchanged 
between reception device 3 and VTR 5. 

[0043] 

The output signal line from 1394 interface 31 to the interior of reception device 3 is 
connected directly to the data transmission line from error correction circuit 22 to signal- 
processing circuit 23. Accordingly, the data obtained from VTR 5 by 1394 interface 3 1 are 
supplied to signal-processing circuit 23. The input signal line from the interior of reception 
device 3 to 1394 interface 31 is connected to the data transmission line from error correction 
circuit 22 to signal-processing circuit 23 via control data insertion unit 30. Accordingly, the 
transport stream output from error correction circuit 22 is supplied to 1394 interface 31 via 
control data insertion unit 30 and then is output to VTR 5. 

[0044] 

Control data insertion unit 30 inserts the EMM supplied from reception device control 
unit 33 into the transport stream that is transmitted to 1394 interface 31. 
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[0045] 

User I/F 32 inputs signals from an operation panel or a remote control (neither of which 
is shown in the figure) via a terminal T4, and recognizes the content of instructions from the user. 
In addition, user I/F 32 notifies reception device control unit 33 of the recognized content of the 
user instructions. 

[0046] 

Reception device control unit 33 has a CPU, ROM, and RAM, for example, and 
implements processes for the overall control of each unit in order to operate as a broadcast 
device by means of software processes. In addition, a control means possessed by this reception 
device control unit 33 is equipped with an individual information processing means, a program 
information processing means, and a control data insertion control means, in addition to a typical, 
publicly known control means such as a processing means for the reception of programs. 

[0047] 

The individual information processing means supplies the EMM that has been separated 
by DEMUX circuit 24 to IC card 4 for [use in] security processes. 

[0048] 

The program information processing means supplies the ECM that has been separated by 
DEMUX circuit 24 to IC card 4 for [use in] security processes. 

[0049] 

When the transport stream is recorded with VTR 5, the control data insertion control 
means controls control data insertion unit 30 so as to insert the EMM supplied from IC card 4 
into the transport stream being recorded. 

[0050] 

A memory 43 is connected to control circuit 42 of IC card 4. Prescribed information 
included in the individual information (hereinafter, 'EMM 1 ), such as an ID pertaining to the 
contract, a descramble key, encoding key, and the like, are registered in memory 43 and are used 
[sic; possibly, 'this memory is used'] to store prescribed information obtained during operation. 
When a group setting has been made, an encoding key (hereinafter, 'group key') assigned to the 
group is registered in addition to a unique encoding key for each contract. 
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[0051] 

Control circuit 42 has a CPU, ROM, and RAM, for example, and performs processes to 
ensure security pertaining to conditional access reception with reception device 3. The various 
processing means for the purpose of ensuring this type of security have [sic; possibly, 'include'], 
a typical, publicly known means for user identification pertaining to the conditional access 
reception, an individual information storage control means, a recording permissibility judgment 
means, an individual information generation means, and an encoding means. 

[0052] 

If the EMM newly received by reception device 3 is for this address, the individual 
information storage control means updates the information registered in memory 43 to [sic; 
based on] prescribed information contained in that EMM. 

[0053] 

Based on the recording control information included in the ECM and the EMM 
information stored in memory 43, the recording permissibility judgment means judges whether 
recording of the program stream that has arrived at reception device 3 is permitted and whether 
group recording is permitted. 

[0054] 

The individual information generation means uses the information stored in memory 43 
to generate EMM for use in group recording only when the recording permissibility judgment 
means has judged that recording is possible. 

[0055] 

Then, the encoding means encodes the EMM generated by the individual information 
generation means. However, when the recording permissibility judgment means has judged that 
group recording is not permitted and normal recording is required, the encoding means uses a 
unique key, and when the recording permissibility judgment means has judged that group 
recording is permitted and group recording is required, it uses the group key. 

[0056] 

In addition to 1394 interface 51, VTR 5 has recording/reproduction structural unit 52 and 
a control circuit 53. 
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[0057] 

Recording/reproduction structural unit 52 is formed so as to have a tape drive mechanism 
and a magnetic head, for example, and a videotape T is mounted therein as needed. In addition, 
recording/reproduction structural unit 52 records on videotape T the transport stream that is 
supplied via 1394 interface 51. 

[0058] 

Control circuit 53 controls 1394 interface 51 and recording/reproduction structural unit 
52 to implement the operations of a VTR. 

[0059] 

Next, the operation of the conditional access system having the aforementioned 
configuration will be explained. 

[0060] 

First, when there is a fee for the viewing of a program, the transport stream generated by 
MUX circuit 12 in broadcast device 1 is scrambled by signal-processing circuit 13. 

[0061] 

This scrambling occurs in units of packets. The key used for scrambling is a first key ks. 
This first key ks is changed at a relatively low frequency. 

[0062] 

Broadcast device control unit 16 indicates the first key ks being used in the ECM. In 
addition, broadcast device control unit 16 encodes the ECM using a second key kw. This second 
key kw is changed at a slower frequency than that of the first key ks. 

[0063] 

Furthermore, broadcast device control unit 16 indicates the second key kw being used in 
the EMM. Then, broadcast device control unit 16 encodes the EMM using each unique key kmi. 

[0064] 

The EMM is information that individually reports the information pertaining to a contract 
on a contract-by-contract basis. Broadcast device control unit 16 sequentially inserts the EMM 
intended for each contract into the transport stream. 
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[0065] 

The EMM originally is comprised of the basic information II shown in Figure 3. This 
basic information II is comprised of subscriber identification information (subscriber ID) II 1 
and contract setting information 112. Subscriber identification information 111 indicates a unique 
identifier that is set with respect to the contract for which that EMM is intended. The contract 
setting information 112 indicates the content of the contract specified by the subscriber 
identification information 111; however, this contract setting information 112 can be omitted 
when there is no change in the contract information. 

[0066] 

However, with the present embodiment, when the contractee has requested a new 
grouping registration, broadcast device control unit 16 adds group setting information 12 such as 
that shown in Figure 3 to the EMM pertaining to the contracts to be grouped together. 

[0067] 

As shown in Figure 3, group setting information 12 includes a group identifier 121 and an 
encoding key 122. Group identifier 121 is an identifier that is determined so as to be unique to the 
group. Encoding key 122 is an encoding key that permits shared use [sic; possibly, 'the shared 
use of which is permitted'] with the multiple contracts included in the group specified by group 
identifier 121; in other words, it indicates a group key. 

[0068] 

At reception device 3 the EMM included in the transport stream is extracted by DEMUX 
circuit 24 and is supplied to control circuit 42 of IC card 4 via card control unit 28 under the 
control of reception device control unit 33. 

[0069] 

When control circuit 42 receives the EMM from reception device 3, it judges whether 
that EMM pertains to its own contract; in other words, it judges the legitimacy of the EMM. If it 
is confirmed that the EMM is legitimate, the data stored in memory 43 are updated based on each 
piece of data included in this EMM. Thus, a newly assigned group identifier and group key are 
registered in IC card 4 and can be subsequently used. 

[0070] 

Similarly, the EMM indicating the same group identifier and group key is supplied to 
other contracts that are to be grouped together as the same group G. Accordingly, a shared group 
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identifier and group key are used among multiple contracts and [thus] a grouping registration is 
performed. 

[0071] 

On the other hand, when a program is broadcast, broadcast device control unit 16 creates 
the ECM for that program and inserts it into the transport stream. 

[0072] 

The ECM originally is comprised of the basic information 13 shown in Figure 4. This 
basic information 13 is comprised of viewing information 131 and a descramble key 132. Viewing 
information 131 includes information indicating program viewing conditions, fee information, 
and the like, as needed. Descramble key 132 is for the purpose of descrambling the transport 
stream. 

[0073] 

However, with the present embodiment, broadcast device control unit 16 adds recording 
control information 14 such as that shown in Figure 4 to the ECM. 

[0074] 

As shown in Figure 4, recording control information 14 includes recording permissibility 
information 141, group recording permissibility information 142, and recording-permitted-group 
information 143. Recording permissibility information 141 indicates whether recording to 
videotape T or the like is permitted. Group recording permissibility information 142 indicates 
whether group recording is permitted. Recording-permitted-group information 143 indicates the 
group identifier for the group for which group recording is permitted. 

[0075] 

When a pay-per-view program has been selected at reception device 3, the ECM included 
in the transport stream is extracted by DEMUX circuit 24 and is supplied to control circuit 42 of 
IC card 4 via card control unit 28 under the control of reception device control unit 33. 

[0076] 

When control circuit 42 receives the ECM from reception device 3, it compares the 
viewing information indicated in that ECM with the contract setting information that has been 
extracted from the EMM and stored in memory 43 to determine whether this program can be 
viewed under the terms of this reception device's contract. Then, control circuit 42 notifies 
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reception device 3 of the judgment result, and when viewing is possible, it also supplies the 
descramble key to reception device 3. Furthermore, if recording control information is included 
in the ECM, control circuit 42 supplies this recording control information to reception device 3 
in the decoded state. 

[0077] 

At reception device 3, if a notification that viewing is possible has been provided from IC 
card 4, then reception device control unit 33 sets that notification and the supplied descramble 
key in signal-processing circuit 23, and the transport stream is descrambled. Thus, viewing of the 
pay-per-view program is enabled. Furthermore, if recording control information has been 
supplied, reception device control unit 33 holds that information in its internal memory. 
Furthermore, if a notification that viewing is not possible has been provided from IC card 4, 
reception device control unit 33 does what is necessary - for example, notifying the user of that 
situation. 

[0078] 

With the present embodiment, a format is used whereby the transport stream is recorded 
before descrambling when a program is recorded. Accordingly, even when a program is capable 
of being viewed based on the aforementioned operation, the program cannot be recorded as is. 

[0079] 

If a user request for program recording is transmitted via user I/F 32, reception device 
control unit 33 executes a recording control process such as that shown in Figure 5 in response 
thereto. 

[0080] 

In this recording control process, reception device control unit 33 first confirms the 
recording control information saved in its internal memory (step ST1). In other words, reception 
device control unit 33 judges whether recording of the program being selected is permitted, and 
whether group recording is possible, and - when the respective charges for individual recording 
and group recording differ - it determines how much those charges are. [The term] 'individual 
recording' means conventional recording in a format whereby the recorded content can be 
reproduced only on a single reception device 3. 
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[0081] 

Next, reception device control unit 33 creates an image such as that shown in Figure 6, 
for example, indicating the results of the aforementioned judgments, and outputs this image via 
mixing circuit 27 for display on a television receiver or the like. At this time the display format 
can be a format that is displayed in place of the program image, or it can be [a format] based on 
anOSD. 

[0082] 

With the example in Figure 6, the program title, recording conditions (in this case it 
shows that both individual recording and group recording are permitted), and the charges are 
displayed. Furthermore, buttons Bl, B2 and B3 are displayed to enable the user to specify 
individual recording or group recording or to stop (cancel) the recording of a program. 

[0083] 

In this state reception device control unit 33 waits for the user to select/specify button B 1 , 
B2, or B3, and then checks that input (step ST3). In other words, when selection information 
indicating either the start of individual recording or group recording or the cancellation of 
recording is input from user I/F 32, reception device control unit 33 confirms whether the input 
is correct according to the information being held [in memory], 

[0084] 

When the input is correct, reception device control unit 33 judges whether it is a request 
for recording to start (step ST4); otherwise - in other words, when a cancellation has been 
specified - the recording control process ends in this state. 

[0085] 

However, if the start of recording has been requested, reception device control unit 33 
operates card control unit 28 and requests that IC card 4 confirm the contract information (step 
ST5). 

[0086] 

When this request is received and if it has been reported that group recording is to be 
performed, control circuit 42 of IC card 4 confirms whether a group identifier and a group key 
have been set in memory 43. When a group identifier and a group key have not been set in 
memory 43, control circuit 42 transmits a reply to reception device 3 indicating that group 
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recording is not possible; when a group identifier and a group key have been set in memory 43, it 
transmits a reply indicating that group recording is possible. 

[0087] 

Thus reception device control unit 33 confirms the responses from IC card 4 and judges 
whether recording of the program requested by the user can be performed (step ST6). When 
recording of the program cannot be performed as requested, reception device control unit 33 
outputs, via mixing circuit 27, an image for the purpose of notifying the user of that situation, 
and thus displays [the image] in a television receiver or the like (step ST7), and then the current 
recording control process ends. Figure 7 is an example of the images displayed when the 
grouping [sic] required for recording of the program being selected has not been registered. 

[0088] 

On the other hand, if recording of the program as requested can be performed, reception 
device control unit 33 judges whether individual recording or group recording is to be performed 
(step ST8). If individual recording is to be performed, IC card 4 is requested to create EMM for 
use with individual recording (step ST9), and if group recording is to be performed, [IC card 4] 
is requested to create EMM for use with group recording (step ST10). 

[0089] 

When the creation of EMM for recording use is thus requested, control circuit 42 in IC 
card 4 uses the data stored in memory 43 to create the EMM. When [EMM] for use in individual 
recording has been requested, a unique key is used to encode the aforementioned EMM that has 
been created, and when [EMM] for use in group recording has been requested, a group key is 
used. Then, control circuit 42 supplies this encoded EMM to reception device 3. 

[0090] 

Then, reception device control unit 33 supplies the EMM, which has been supplied from 
IC card 4 as described above, to control data insertion unit 30, where it is inserted into the NULL 
packet portion of the transport stream (step ST11), after which reception device control unit 33 
ends the current recording control process. 

[0091] 

The transport stream in which the EMM has been inserted by control data insertion unit 
30 undergoes a format conversion in 1394 interface 31 and then is output from terminal T3 in the 
scrambled state. 
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[0092] 

At VTR 5 the transport stream that has been output from terminal T3 of reception device 
3 and transmitted via cable C is picked up by 1394 interface 51 and recorded on videotape T by 
recording/reproduction structural unit 52. 

[0093] 

Thus, a transport stream into which the EMM generated by IC card 4 has been inserted is 
output to VTR 5, and this transport stream is recorded on videotape T. 

[0094] 

The operation for viewing of a program based on the transport stream recorded on 
videotape T is as follows. 

[0095] 

First, the transport stream recorded on videotape T is read out by recording/reproduction 
structural unit 52 and supplied via 1394 interface 5 1 to reception device 3 via cable C. 

[0096] 

At reception device 3 the transport stream thus supplied from VTR 5 is picked up by 
1394 interface 31 and supplied as is to signal-processing circuit 23. Then, reproduction of the 
program based on this transport stream supplied from VTR 5 occurs in the same manner as when 
a broadcast is received, but the EMM used in this case has been generated by IC card 4 when 
[the program was] recorded. 

[0097] 

When this EMM has been encoded using a unique key, the release of that encoding is 
[enabled] only with the IC card 4 that was installed in the reception device 3 that received the 
transport stream when the program was recorded. Accordingly, reception device 3 is able to 
obtain the descramble key, and the program can be reproduced only, when the same IC card 4 
that was used to record the program is installed in reception device 3. 

[0098] 

In contrast thereto, when the EMM has been encoded using a group key, the release of 
the encoding is [enabled] only with an IC card 4 that has been registered in the same group as the 
IC card 4 that was installed in the reception device 3 that received the transport stream when the 
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program was recorded. Accordingly, even if an IC card 4 other than the one used when the 
program was recorded is installed in reception device 3, the program can be reproduced as long 
as the installed IC card 4 is registered in the same group as [the IC card] used when the program 
was recorded. 

[0099] 

Thus, by means of the present embodiment, a shared group key is registered with respect 
to multiple IC cards 4, and when group recording is performed, the EMM that has been encoded 
using the group key is inserted into the transport stream to be recorded. Accordingly, 
reproduction of a program based on a transport stream for which group recording has been 
performed can occur in any reception device 3 in which [any of] the multiple IC cards 4 for 
which the shared group key has been registered is installed. Consequently, it is possible to view 
[a program] using a reception device 3 other than the one with which the program was recorded 
without having to exchange IC card 4, which significantly improves the user's convenience. In 
other words, for example, if there are multiple reception devices 3 in one home, then by 
registering the respective contracts pertaining to those reception devices 3 as a group, it becomes 
possible to view a program recorded in one room in another room, which increases the user's 
degree of freedom with respect to viewing. 

[0100] 

Furthermore, with the present embodiment, the viewing range for a program for which 
group recording is permitted is restricted to [reception devices for which] the same group 
registration has been performed, so it is possible to prevent abuse such as the distribution of 
copies, and security can be sufficiently maintained. 

[0101] 

Furthermore, by means of the present embodiment, group recording can be used 
effectively only with contracts for which a group registration has been performed, so the 
broadcasting company also is able to recover a charge for a service whereby the registration of 
groups is permitted. 

[0102] 

Moreover, by means of the present embodiment, the ECM is used to report the recording 
control information 14 from broadcast device 1 to reception device 3, so recording control 
information 14 is reported during broadcasting as frequently as approximately every 100 ms to 
several seconds. Accordingly, recording control information 14 can be obtained quickly at 
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reception device 3 at any time during the program broadcast, and a judgment regarding whether 
recording is permitted can be made in real time when it becomes necessary to record a program. 

[0103] 

Furthermore, the present invention is not limited to the aforementioned embodiment. For 
example, with the aforementioned embodiment, the recording control information 14 is 
transmitted from broadcast device 1 to reception device 3 by including it in the ECM; however, 
it also can be included in the control information that constitutes the program guide information, 
such as an EIT (Event Information Table) or SDT (Service Definition Table). Figure 8 is a 
diagram showing the situation when recording control information 14 is included in an EIT. In 
this figure the symbol 15 denotes the program structural component data, which is the basic 
information of the EIT, and the recording control information 14 has been included by appending 
it thereto. 

[0104] 

If recording control information 14 is thus included in the program guide information, the 
permissibility of group recording can be judged before the program broadcast begins, and for 
example the recording method can be selected when a reservation for a timer recording is made. 

[0105] 

However, in this case the EMM for recording use is supplied from IC card 4 before the 
program broadcast begins, so that the EMM will be stored and held in reception device 3 until 
the program actually is broadcast. Alternatively, the recording request from the user can be held 
in reception device 3 until the program broadcast begins, and broadcast device 1 can request the 
EMM from IC card 4 when the broadcast starts or just before the broadcast starts. 

[0106] 

Program guide information such as in the EIT is not characterized by being real-time 
[information], but it is information that can be obtained in ail time slots, and the ECM is 
information that can be obtained in real time at short intervals while the program is being 
broadcast; therefore, by reporting the recording control information 14 with both of these types of 
control information, the recording control operation can be performed smoothly at any time, 
from the time of the [recording] reservation to [a time] during the broadcast of the program. 
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[0107] 

Furthermore, recording control information 14 can be included in preexisting control 
information other than the ECM, EFT [information], or SDT [information]; or, a specific type of 
control data for the purpose of reporting the recording control information 14 can be established 
and can be transmitted as a suitable packet. 

[0108] 

Furthermore, with the aforementioned embodiment, reception device 3 outputs the 
transport stream for recording use to a separate VTR 5, with VTR 5 recording [the program] to 
videotape T, but the functionality of VTR 5 can be embedded in reception device 3. 

[0109] 

Furthermore, with the aforementioned embodiment, videotape T was used as an example 
of the recording medium for recording of the program, but any recording medium, such as a 
DVD, can be used. 

[0110] 

Various other embodiments are possible without departing from the scope of the present 
invention. 

[0111] 

Effect of the invention 

By means of the present invention, group recording is enabled according to the user's 
desire only for programs for which it is indicated - by means of the recording control 
information indicated in the program stream at the broadcast device - that group recording is 
permitted; in addition, this group recording is performed by recording a recording-use program 
stream formed by multiplexing individual information - which is generated by the security 
module and has been encoded using a prescribed encoding key that is shared by multiple 
contracts - with the aforementioned program stream transmitted from the broadcast device. 
Therefore, the degree of freedom can be improved with respect to reproduction of programs 
recorded on a recording medium within a prescribed region, such as a home, and convenience 
can be ensured for the subscriber, while preventing abuse such as the distribution of copies. 



27 



Brief description of the figures 

Figure 1 is a block diagram showing the configuration of the relevant parts of a 
conditional access system and the relevant parts of a broadcast device according to an 
embodiment of the present invention. 

Figure 2 is a block diagram showing the configuration of the relevant parts of reception 
device 3, IC card 4, and VTR 5 in Figure 1 . 

Figure 3 is a diagram schematically illustrating the configuration of the EMM data used 
with an embodiment of the present invention. 

Figure 4 is a diagram schematically illustrating the configuration of the ECM data used 
with an embodiment of the present invention. 

Figure 5 is a flowchart showing the processing procedure when recording control is 
performed by reception device control unit 33 in Figure 1 . 

Figure 6 is a diagram showing one example of an image displayed to present information 
pertaining to the recording of a program to the user. 

Figure 7 is a diagram showing one example of an image displayed to notify the user that 
group recording cannot be performed. 

Figure 8 is a diagram showing an example wherein the recording control information is 
included in an E1T. 

Explanation of symbols 
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Figure 2 
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Key: A Recording control process starts 

B End 

C Group 

D Individual 

ST1 Confirm recording control information 



ST2 Display (recording control information) 

ST3 Check input 

ST4 Recording request? 

ST5 Request confirmation of contract information 

ST6 Recording as requested possible? 

ST7 Display (recording not possible) 

ST8 Individual/Group? 
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ST1 1 Insert EMM for recording use into transport stream 
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A Title: 

Recording conditions: 

Individual - Permitted 
Group - Permitted 

Charge 

Individual only - 200 yen 
Group - 300 yen 

Bl Individual 

B2 Group 

B3 Cancel 
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Key: A No group setting has been made. Please confirm. 
B Cancel 
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Figure 8 



Key: A Recording control information 

15 Program structural component information 

141 Recording = Permitted 

142 Group recording = Permitted 

143 Group identifier = 1 
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